CVE-2018-9486

CVE-2018-9486 affects the Bluetooth stack component hidh_l2cif_data_ind in hidh_conn.cc, where a missing bounds check can cause an out-of-bounds read. This could lead to local information disclosure over Bluetooth with no additional execution privileges and without user interaction. Connected sou...

CVE-2018-9504

CVE-2018-9504 affects Android Bluetooth SDP discovery: a possible out-of-bounds write in sdp_copy_raw_data (sdp_discovery.cc) due to an incorrect bounds check, enabling remote code execution with no user interaction. Affected Android versions include 7.0–9.0; exploitation status and specific patc...

CVE-2018-9505

CVE-2018-9505 affects Android Bluetooth code (mca_ccb_hdl_req in mca_cact.cc) causing an out-of-bounds read due to a missing bounds check. The Android bulletin lists this as CVE-2018-9505 (Framework, ID) with High severity and notes affected patch levels, including 2018-10-01 and 2018-10-05 updat...

CVE-2018-9548

CVE-2018-9548 affects Android: multiple ContentProvider.java functions allow a permission bypass due to missing URI validation, enabling local information disclosure without user interaction. Vulnerable in Android 7.0–7.1.2, 8.0–8.1, and 9.0. Mitigation is to apply patches from the 2018-12-01/12-...

CVE-2019-1994

CVE-2019-1994 affects Android 8.0–9 where DevelopmentTiles.java could leave development settings accessible due to an insecure default. This Elevation of Privilege vulnerability could grant access to development settings with no extra privileges; exploitation requires user interaction. Affected s...

CVE-2019-2049

CVE-2019-2049 involves a memory corruption via a use-after-free in avrcp_service.cc (SendMediaUpdate/SendFolderUpdate), leading to local privilege escalation in the Android Bluetooth service on Android 9. The Android bulletin attributes this as an EoP (High) vulnerability in the System component;...

CVE-2019-2053

CVE-2019-2053 affects Android, specifically the wnm_parse_neighbor_report_elem routine in wnm_sta.c, where a missing bounds check can cause an out-of-bounds read and local information disclosure without user interaction. Affected Android versions include 7.0–9. The vulnerability is documented acr...

CVE-2019-20538

CVE-2019-20538 concerns a heap overflow in the knox_kap driver on Samsung mobile devices running P(9.0) software (Samsung ID SVE-2019-14857). The vulnerability affects the kernel driver stack used by Samsung devices and is documented as a local issue within the knox_kap component. The provided so...

CVE-2019-20576

The CVE-2019-20576 issue affects Samsung mobile devices running P(9.0) software. Affected component: MemorySaver Content Provider, which permits SQL injection. The root cause is an injection vulnerability in the Content Provider’s handling of queries, enabling a remote attacker to manipulate the ...

CVE-2019-20607

The CVE-2019-20607 issue affects Samsung mobile devices on N(7.x), O(8.x) and P(9.0) platforms (MSM8996/8998, Exynos7420/7870/8890/8895). A heap overflow in the keymaster Trustlet allows writing to TEE memory and leads to arbitrary code execution. No exploitation details or explicit patch/version...

CVE-2019-9343

CVE-2019-9343 affects the Bluetooth stack in Android 10. The vulnerability arises from a missing bounds check that enables an out-of-bounds read, leading to remote information disclosure without requiring privileges or user interaction. Impact is confined to information disclosure; no exploitatio...

CVE-2019-9472

CVE-2019-9472 describes a timing side-channel in DCRYPTO_equals (compare.c) in the Android kernel/Titan-M component, enabling local information disclosure without extra privileges and without user interaction. Public details across sources confirm the root cause as improper crypto usage, with dis...

CVE-2020-0017

CVE-2020-0017 is an information-disclosure flaw in the Android Framework where the primary user’s dictionary could be visible and modifiable by other local users. It affects Android 8.0–10 and requires no extra execution privileges, with exploitation requires user interaction. The Android 2020 se...

CVE-2020-0025

CVE-2020-0025 affects Android 11, involving a vulnerability in PackageManagerService.deletePackageVersionedInternal that can bypass permissions to exit Screen Pinning. The issue enables local privilege escalation without extra execution privileges and does not require user interaction. NVD and An...

CVE-2020-0097

CVE-2020-0097 affects Android Framework (PackageManagerService.java). A missing condition for system apps permits a local privilege escalation from a User account with no user interaction required. Exploitation status is not detailed in the provided documents. The vulnerability is listed in Andro...

CVE-2020-0167

CVE-2020-0167 affects Android 10 with an out-of-bounds read in ResourceTypes.cpp caused by an integer overflow, leading to potential local information disclosure. Exploitation requires user interaction, and the issue is classified as Moderate severity for the framework in the Pixel bulletin. Affe...

CVE-2020-0203

CVE-2020-0203 affects Android 10 Framework: a bug in freeIsolatedUidLocked within ProcessList.java can cause UID reuse from improper cleanup, enabling local privilege escalation between constrained processes with no extra privileges and no user interaction required. The Pixel Update Bulletin list...

CVE-2020-12746

CVE-2020-12746 affects Samsung mobile devices (Exynos) on O(8.X), P(9.0), and Q(10.0). The issue is a heap-based buffer overflow that lets an attacker bypass the Secure Bootloader protection mechanism and execute arbitrary code. The Samsung internal ID is SVE-2020-16712 (May 2020). Connected sour...

CVE-2020-12752

CVE-2020-12752 affects Samsung mobile devices running P(9.0)/Q(10.0) with TEEGRIS. The issue allows attackers to determine user credentials via a brute-force attack against the Gatekeeper Trustlet, as described in multiple sources (Samsung ID SVE-2020-16908). The attack surface is the Gatekeeper ...

CVE-2020-13830

Technical details are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2020-35551

CVE-2020-35551 describes a RPMB state-change vulnerability in Samsung mobile devices with Exynos (O(8.x), P(9.0), Q(10.0)) where an unauthorized RPMB write can be replayed, enabling replay attacks. Root cause centers on RPMB state manipulation; the issue is related to CVE-2020-13799. Documented i...

CVE-2021-0343

CVE-2021-0343 affects the kisd component in Android 11. The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation to System privileges without user interaction. The vulnerability impact is described as high for confidentiality, integrity, and availability in ...

CVE-2021-0350

CVE-2021-0350 affects Android devices running Android-8.1, Android-9, Android-10, and Android-11. The issue is in the generic governance of input handling in the component described as “ged,” caused by improper input validation, which can cause a local denial of service and requires system execut...

CVE-2021-0359

In netdiag, a bug causes an out-of-bounds write due to a missing bounds check, enabling local escalation of privilege with System execution privileges required. Affected software is Android (Android-10, Android-11). The issue is baseline described across multiple sources (NVD/Red Hat/PRION, etc.)...

CVE-2021-0364

CVE-2021-0364 affects Android (Android-10 and Android-11) due to a command-injection vulnerability in mobile_log_d caused by improper input validation. The issue can enable local escalation of privileges with System execution privileges required and does not require user interaction. Patch ALPS05...

CVE-2021-0368

CVE-2021-0368 concerns an out-of-bounds read in oggpack_look within bitwise.c, leading to potential information disclosure. The issue is documented for Android 11; the Pixel/Android bulletin indicates this vulnerability is addressed in updated AOSP versions (minimum patch level 2021-03-05, i.e., ...

CVE-2021-0375

CVE-2021-0375 affects Android 11 and is tied to VoiceInteractionManagerService.java: onPackageModified could change default apps due to an insecure default value, enabling local elevation of privilege without extra privileges. Exploitation is described as requiring no user interaction. The issue ...

CVE-2021-0377

CVE-2021-0377 affects Android 11 (DeltaPerformer::Write in delta_performer.cc). Improper input validation allows a local elevation of privilege bypassing defense-in-depth protections with no user interaction. Exploitation details are not provided in the documents. The Pixel/Android bulletin indic...

CVE-2021-0453

CVE-2021-0453 corresponds to a vulnerability in the Titan-M firmware (and related Android kernel component) where uninitialized data can cause a disclosure of stack memory, leading to local information disclosure with system-level privileges required. The public descriptions consistently state th...

CVE-2021-0490

CVE-2021-0490 affects Android’s memory management driver (MediaTek memory management driver) and describes an out-of-bounds write due to a missing bounds check that could enable local elevation of privilege with no user interaction. The issue is documented across sources including NVD and the 202...

CVE-2021-0518

CVE-2021-0518 affects Android 13, where a missing permission check in Wi‑Fi can leak location‑sensitive data, enabling local information disclosure without extra execution privileges. Root cause: lack of access control around Wi‑Fi data exposure. Impact is information disclosure with no user inte...

CVE-2021-0525

CVE-2021-0525 affects the Android memory management driver. The underlying issue is a use-after-free that enables an out-of-bounds write, leading to local escalation of privilege with no additional execution privileges required and no user interaction. Exploitation status is not detailed in the p...

CVE-2021-0630

CVE-2021-0630 affects MediaTek WiFi driver components. The flaw is a missing bounds check in the wifi driver that can cause a system crash, enabling remote denial of service with no additional privileges or user interaction required. Several connected sources (NVD, Red Hat advisories, CVE registr...

CVE-2021-0657

CVE-2021-0657 affects apusys and is caused by a stack-based buffer overflow leading to an out-of-bounds write. This can enable local escalation to System privileges without user interaction. The vulnerability context is supported by multiple sources (e.g., Red Hat, NVD) and lists a patch referenc...

CVE-2021-0658

CVE-2021-0658 affects the apusys component with an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with System execution privileges required and no user interaction. Public documentation consistently notes this is a local vulnerability with high-impact...

CVE-2021-0671

CVE-2021-0671 affects the apusys component, where a missing bounds check can cause memory corruption leading to local escalation of privilege with System execution privileges. Exploitation details are not provided in the documents; user interaction is not required. A patch is identified as ALPS05...

CVE-2021-0678

CVE-2021-0678 affects the MediaTek Apusys component, where a missing bounds check enables an out-of-bounds write. This could allow local escalation of privilege with System execution privileges and no user interaction required. The Public references indicate Patch ID ALPS05672107 and Issue ID ALP...

CVE-2021-22494

Summary: CVE-2021-22494 affects Samsung Note20 devices running Q (10.0) software. The fingerprint scanner may misbehave when a screen protector is used because the required image compensation is not present during enrollment. This can lead to inversion and a high False Recognition Rate (FRR). The...

CVE-2021-25393

CVE-2021-25393 affects Samsung's SecSettings prior to SMR May-2021 Release 1. The issue is improper sanitization of an incoming intent that lets a local attacker gain permissions to access system UID data. Affected component is the Settings app on Samsung Android devices; root cause relates to in...

CVE-2021-25443

CVE-2021-25443 is a use-after-free vulnerability in the Samsung conn_gadget driver prior to SMR AUG-2021 Release 1. Affected component: conn_gadget driver in Samsung mobile software. Root cause per records: use-after-free leading to potential malicious action by an attacker. Impact is described a...

CVE-2021-25459

CVE-2021-25459 affects BlockchainTZService. The vulnerability is an improper access control in the sspInit() function that allows attackers to start the BlockchainTZService. Affected versions are prior to SMR Sep-2021 Release 1. Exploitation details are not provided beyond local access vectors im...

CVE-2021-25510

CVE-2021-25510 concerns an improper validation in FilterProvider, prior to Samsung SMR Dec-2021 Release 1, enabling local arbitrary code execution. Affected context is Samsung mobile software; vulnerability is localized with potential full impact to confidentiality, integrity, and availability as...

CVE-2022-20019

CVE-2022-20019 affects the MediaTek libMtkOmxGsmDec component. The issue is an incorrect bounds check that may allow local information disclosure without requiring additional execution privileges; user interaction is not needed. The CVE description and Red Hat/NVD entries confirm the impact is li...

CVE-2022-20215

CVE-2022-20215 describes a tapjacking/overlay attack in the MasterClearConfirmFragment.java on Android 10–12 that could trigger a local factory reset, causing a denial of service without extra privileges. Exploitation requires user interaction and can occur locally; no exploit details or likeliho...

CVE-2022-20300

CVE-2022-20300 affects Android 13, where a missing permission check in the Content component allows an attacker with local access to determine whether a given account exists on the device, causing local information disclosure. The issue requires LOW privileges and no user interaction (local attac...

CVE-2022-20317

CVE-2022-20317 affects Android 13 SystemUI. A logic error in SystemUI could allow local information disclosure by enabling the external speaker; exploitation requires user interaction and no extra privileges. The issue is documented across multiple sources (NVD entry, RH Red Hat CVE page, CNVD/CN...

CVE-2022-20334

CVE-2022-20334 affects Android 13 via a Bluetooth null pointer dereference that can cause remote denial of service without user interaction. Affected product/module: Android Bluetooth stack on Android 13. Root cause: dereferencing a null pointer in Bluetooth processing leading to process crash. I...

CVE-2022-20342

CVE-2022-20342 affects Android 13. An insecure default in WiFi could disclose the WiFi password to the end user, enabling local information disclosure without extra privileges or user interaction. The issue is categorized under Android 13 security release notes; no exploitation details or active ...

CVE-2022-20429

CVE-2022-20429 affects Android’s CarSettings component across Android-10/11/12/12L. The issue enables a local elevation of privilege in Bluetooth settings via a confused deputy, requiring no user interaction and permitting an adjacent attacker with no privileges to exploit (per the referenced NVD...

CVE-2022-20458

CVE-2022-20458 affects Android (Android-12L). The vulnerability is an information disclosure in logs: StatusBarNotification.getKey() may print sensitive data (PII or hardware identifiers) via CarNotificationListener.java in Android "user" builds, exposing user account names. Affected component ap...